Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/N7ptAp5XbkH0eWuuagJHktG7ziA.roa
File: N7ptAp5XbkH0eWuuagJHktG7ziA.roa (raw, json)
Hash identifier: AITHVfCiuZVghG3DCyaCmVzs6L7cD/ydBOjSiKVHw7I=
Subject key identifier: 37:BA:6D:02:9E:57:6E:41:F4:79:6B:AE:6A:02:47:92:D1:BB:CE:20
Certificate issuer: /CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Certificate serial: 018D6F74B68FE9620B620BF73FB91967CBA8
Authority key identifier: 1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/N7ptAp5XbkH0eWuuagJHktG7ziA.roa
Signing time: Sat 03 Feb 2024 14:52:16 +0000
ROA not before: Sat 03 Feb 2024 14:52:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34412
IP address blocks: 31.25.90.0/24 maxlen: 24
31.25.91.0/24 maxlen: 24
62.204.61.0/24 maxlen: 24
77.72.80.0/24 maxlen: 24
91.246.44.0/24 maxlen: 24
146.19.217.0/24 maxlen: 24
185.49.231.0/24 maxlen: 24
185.226.140.0/24 maxlen: 24
185.226.141.0/24 maxlen: 24
185.226.142.0/24 maxlen: 24
185.226.143.0/24 maxlen: 24
193.3.182.0/24 maxlen: 24
2a10:5740::/48 maxlen: 48
2a10:5740:2::/48 maxlen: 48
2a11:9b40::/48 maxlen: 48
2a11:9b40:1::/48 maxlen: 48
2a11:9b40:2::/48 maxlen: 48
2a11:9b40:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 12:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6f:74:b6:8f:e9:62:0b:62:0b:f7:3f:b9:19:67:cb:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Validity
Not Before: Feb 3 14:52:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37ba6d029e576e41f4796bae6a024792d1bbce20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:71:4a:cb:d5:16:11:70:92:d7:77:de:3b:5f:
c5:03:d6:12:c7:76:bb:65:e4:cf:95:f1:5d:77:bd:
12:4d:7a:f5:13:99:14:a2:31:c1:ac:09:92:ba:e1:
30:50:8b:dc:79:cb:94:32:db:cf:32:65:61:f0:e1:
14:49:51:e4:49:1f:de:d2:8d:bd:00:8f:04:a0:a7:
5a:9e:78:ba:79:44:3a:ae:67:ca:e5:18:e5:95:0e:
db:d3:30:c0:f0:88:ea:77:12:17:31:0e:fa:5d:1a:
a4:7b:6b:0d:15:6f:1c:d2:73:7f:b7:d1:9c:8a:9f:
a3:1a:19:a9:9f:92:03:41:e1:49:01:f7:50:f7:79:
ab:f9:b5:a7:ed:51:83:29:a0:9c:32:95:19:e0:76:
4c:c0:ae:94:11:f9:a2:d1:4b:f1:51:a2:b4:5e:34:
00:d9:8b:42:28:17:01:85:7a:98:f8:da:dc:3b:6a:
e8:eb:d4:f6:96:ba:8b:3d:71:d5:d4:6e:b1:a2:00:
b1:67:1f:e6:e4:36:a6:b0:0e:51:9a:83:8c:4e:5b:
f2:bc:3f:35:4d:ff:ca:b2:39:c1:07:fe:e5:c0:41:
c7:c4:e2:19:61:d5:10:6a:ca:3b:d2:c0:7c:c0:2b:
18:92:51:7f:b0:60:03:5f:f0:86:32:11:16:d6:b8:
b1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BA:6D:02:9E:57:6E:41:F4:79:6B:AE:6A:02:47:92:D1:BB:CE:20
X509v3 Authority Key Identifier:
keyid:1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/N7ptAp5XbkH0eWuuagJHktG7ziA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.90.0/23
62.204.61.0/24
77.72.80.0/24
91.246.44.0/24
146.19.217.0/24
185.49.231.0/24
185.226.140.0/22
193.3.182.0/24
IPv6:
2a10:5740::/48
2a10:5740:2::/48
2a11:9b40::/46
Signature Algorithm: sha256WithRSAEncryption
02:03:22:12:36:f3:14:c1:58:71:83:77:ce:51:aa:80:63:54:
ba:42:88:0b:c9:e0:ff:d0:66:a7:4d:62:20:dc:c8:c1:c3:3a:
42:41:b2:4a:53:0f:21:fe:7c:ea:52:0f:a2:00:1f:0b:2d:75:
79:10:02:6a:62:5d:74:93:80:ad:69:96:13:ca:9b:f2:23:f9:
86:46:a4:71:c1:fe:0c:da:cd:dc:81:f1:a0:00:b8:9e:cf:ef:
18:57:ef:31:88:62:ec:c2:7e:05:d2:b5:b6:f3:8c:42:3e:fb:
d4:83:49:52:7e:9c:3c:c9:dd:0d:ae:85:cb:c6:f4:08:82:19:
54:3e:b9:e8:c9:26:c4:6f:9d:a9:fa:7d:58:3a:ac:e6:0e:26:
b4:67:eb:3d:7b:ba:9f:f4:94:83:58:98:68:f0:c2:ce:de:4f:
62:33:13:13:80:d8:bc:b4:87:0b:58:cb:90:a4:bc:ae:30:d6:
14:b2:74:57:6a:8f:05:dd:17:ce:8b:bd:98:6c:48:05:a9:21:
6e:c4:72:3e:83:0a:ff:d0:d8:9a:40:13:b3:e3:22:48:99:3a:
57:fb:41:fa:b6:b0:88:32:18:c0:80:8f:b3:a4:d8:59:27:40:
17:0b:d8:a7:59:49:b4:71:41:3e:3c:0b:52:f3:55:8a:29:3b:
86:e0:57:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:26 2024 by rpki-client on console-ams.rpki-client.org